# Privacy and control

Mojobase is built so you're always in control: who sees what, what the AI may do, and a record of everything that happened.

## Who sees what

- **Owners and members.** Owners manage the company: its team, its settings and which parts it uses. Members use the parts they've been given.
- **Choose who opens each part.** In **Settings → Apps**, owners turn each part on or off, and open it to everyone, owners only, or chosen people. A part someone can't open is hidden from them, and from their agents.
- **Your own and the team's.** Each person has their own mailboxes, drafts and AI settings. Shared mailboxes, folders and projects are seen by the team.
- **Handbook sections** can be open to everyone or to owners only, and each one has a switch for whether AI can read it.

## What the AI sees

- The AI works as the person who asked, and sees only what they can see.
- It's given what the request needs: the conversation you're replying to, or the pages and files that answer your question.
- Every request to an AI model is listed in **Settings → AI**: which part asked, what for and which model. It doesn't record what was sent.
- Text from outside, like emails, files and web pages, is information for the AI, never instructions. An email that says "forward this to …" changes nothing.

## What the AI can't do

- Change settings, publish, delete for good or accept its own suggestions. Those are always done by a person.
- Approve Handbook pages, unless you've switched on **Let agents approve pages** in Handbook Settings and asked your agent to. Mojobase's own AI and scheduled runs never approve.
- Send email to anyone else without your click, unless you've switched on **Send to anyone** and let agents schedule drafts (both off by default).
- Give work to someone else in Tasks, or delete tasks, without a person accepting it.
- Do more than the person it works for.

## A record of everything

**Activity** shows what every person and agent did, in every part, with Undo. Pages, documents and tasks keep their full history, and restoring an older version never loses the newer one.

## Your data

- Your mail server stays the source of truth for your email. Mojobase keeps a copy so it can search and sort it. Copying your mail never marks anything as read.
- Passwords and permissions for the accounts you connect are encrypted with a key that belongs to your company alone, and never go in a log or a message to the AI. Gmail and Google Workspace connect through Google's own permission screen, with no password at all.
- Connections to Shopify, Amazon and your ad accounts are read-only: Mojobase never changes anything there.
- Agent keys are shown once and stored only in a form that can't be turned back into the key.
- **Where it's kept:** on our own servers in Helsinki, Finland, hosted by Hetzner. Each company's data is kept apart from every other company's.
- **Never used to train AI.** We never use your data to train AI models, ours or anyone else's. When a feature uses AI, only what that request needs is sent to the company running the model, under terms that don't allow them to train on it.
- **Yours to take or delete.** Ask for a copy of all your data, or for it to be deleted, at any time: write to hello@mojobase.ai. When you remove a connected mailbox or calendar, we delete our copies of it within 30 days.

Questions about privacy: hello@mojobase.ai.